Lunny Xiao c3d9d07702 fix: Add missed token scope checking (#37735) ...

Follow #37698

2026-05-18 04:52:08 +00:00

..

actions

feat: execute post run cleanup when workflow is cancelled (#37275)

2026-05-17 08:41:39 +02:00

setting

feat: Add bypass allowlist for branch protection (#36514)

2026-05-16 14:23:42 +00:00

activity.go

refactor: use named Permission field in Repository struct instead of anonymous embedding (#37441)

2026-04-26 20:18:28 +00:00

attachment.go

fix(web): enforce token scopes on raw, media, and attachment downloads (#37698)

2026-05-16 14:50:41 +00:00

blame.go

fix: Invalid UTF-8 commit messages in JSON API responses (#37542)

2026-05-07 16:19:45 +02:00

branch.go

refactor: use named Permission field in Repository struct instead of anonymous embedding (#37441)

2026-04-26 20:18:28 +00:00

code_frequency.go

…

commit.go

fix: Invalid UTF-8 commit messages in JSON API responses (#37542)

2026-05-07 16:19:45 +02:00

common_recentbranches.go

Fix issue label deletion with Actions tokens (#37013)

2026-03-29 09:21:14 +00:00

compare_test.go

fix: Invalid UTF-8 commit messages in JSON API responses (#37542)

2026-05-07 16:19:45 +02:00

compare.go

fix: Invalid UTF-8 commit messages in JSON API responses (#37542)

2026-05-07 16:19:45 +02:00

contributors.go

…

download.go

fix(web): enforce token scopes on raw, media, and attachment downloads (#37698)

2026-05-16 14:50:41 +00:00

editor_apply_patch.go

Replace Monaco with CodeMirror (#36764)

2026-03-31 21:50:45 +00:00

editor_cherry_pick.go

fix: Invalid UTF-8 commit messages in JSON API responses (#37542)

2026-05-07 16:19:45 +02:00

editor_error.go

Refactor flash message and remove SanitizeHTML template func (#37179)

2026-04-12 10:17:25 +08:00

editor_fork.go

…

editor_preview.go

Use full-file highlighting for diff sections (#36561)

2026-02-10 03:29:28 +00:00

editor_test.go

…

editor_uploader.go

fix attachment file size limit in server backend (#35519)

2025-10-21 15:07:11 +00:00

editor_util.go

Replace Monaco with CodeMirror (#36764)

2026-03-31 21:50:45 +00:00

editor.go

Replace Monaco with CodeMirror (#36764)

2026-03-31 21:50:45 +00:00

fork.go

…

githttp_test.go

…

githttp.go

fix(security): enforce wiki git writes and LFS token access at request time (#37695)

2026-05-15 08:12:59 +00:00

helper.go

…

issue_comment.go

refactor: use named Permission field in Repository struct instead of anonymous embedding (#37441)

2026-04-26 20:18:28 +00:00

issue_content_history.go

refactor: use named Permission field in Repository struct instead of anonymous embedding (#37441)

2026-04-26 20:18:28 +00:00

issue_dependency.go

Fix issue label deletion with Actions tokens (#37013)

2026-03-29 09:21:14 +00:00

issue_label_test.go

…

issue_label.go

…

issue_list.go

Allow multiple projects per issue and pull requests (#36784)

2026-04-30 22:38:05 +08:00

issue_lock.go

…

issue_new.go

Allow multiple projects per issue and pull requests (#36784)

2026-04-30 22:38:05 +08:00

issue_page_meta.go

Allow multiple projects per issue and pull requests (#36784)

2026-04-30 22:38:05 +08:00

issue_pin.go

…

issue_poster.go

fix(repo): unify DEFAULT_SHOW_FULL_NAME output in templates and dropdown (#36597)

2026-03-04 21:23:17 +08:00

issue_stopwatch.go

…

issue_suggestions.go

refactor: use named Permission field in Repository struct instead of anonymous embedding (#37441)

2026-04-26 20:18:28 +00:00

issue_test.go

…

issue_timetrack.go

refactor: use named Permission field in Repository struct instead of anonymous embedding (#37441)

2026-04-26 20:18:28 +00:00

issue_view.go

feat: Add bypass allowlist for branch protection (#36514)

2026-05-16 14:23:42 +00:00

issue_watch.go

refactor: use named Permission field in Repository struct instead of anonymous embedding (#37441)

2026-04-26 20:18:28 +00:00

issue.go

refactor: use named Permission field in Repository struct instead of anonymous embedding (#37441)

2026-04-26 20:18:28 +00:00

main_test.go

…

mention.go

Load mentionValues asynchronously (#36739)

2026-03-07 12:37:37 -08:00

middlewares_test.go

Fix diff view style handling (#36324)

2026-01-09 04:37:16 +00:00

middlewares.go

Refactor compare diff/pull page (1) (#37481)

2026-04-29 18:32:46 +00:00

migrate.go

Deprecate RenderWithErr (#36769)

2026-02-27 12:38:44 +00:00

milestone.go

Allow multiple projects per issue and pull requests (#36784)

2026-04-30 22:38:05 +08:00

packages.go

refactor: use named Permission field in Repository struct instead of anonymous embedding (#37441)

2026-04-26 20:18:28 +00:00

projects_test.go

…

projects.go

Allow multiple projects per issue and pull requests (#36784)

2026-04-30 22:38:05 +08:00

pull_merge_box.go

feat: Add bypass allowlist for branch protection (#36514)

2026-05-16 14:23:42 +00:00

pull_merge_form.go

feat: Add bypass allowlist for branch protection (#36514)

2026-05-16 14:23:42 +00:00

pull_review_test.go

Refactor template render (#36438)

2026-01-24 05:11:49 +00:00

pull_review.go

Refactor compare diff/pull page (1) (#37481)

2026-04-29 18:32:46 +00:00

pull.go

feat: Add bypass allowlist for branch protection (#36514)

2026-05-16 14:23:42 +00:00

recent_commits.go

…

release_test.go

refactor: use named Permission field in Repository struct instead of anonymous embedding (#37441)

2026-04-26 20:18:28 +00:00

release.go

refactor: use named Permission field in Repository struct instead of anonymous embedding (#37441)

2026-04-26 20:18:28 +00:00

render.go

Rename CurrentRefPath to CurrentRefSubURL (#37453)

2026-04-28 00:34:17 +00:00

repo.go

fix: Add missed token scope checking (#37735)

2026-05-18 04:52:08 +00:00

search.go

Fix CodeQL code scanning alerts (#36858)

2026-03-08 14:35:50 +00:00

star.go

Fix inconsistent disabled styling on logged-out repo header buttons (#37406)

2026-04-27 17:33:10 +00:00

topic.go

…

transfer.go

Fix Repository transferring page (#37277)

2026-04-19 17:57:51 +00:00

treelist_test.go

fix some file icon ui (#36078)

2025-12-04 19:47:23 +01:00

treelist.go

Refactor ls-tree and git path related problems (#35858)

2025-11-05 17:48:38 +00:00

view_file.go

Rename CurrentRefPath to CurrentRefSubURL (#37453)

2026-04-28 00:34:17 +00:00

view_home_test.go

…

view_home.go

chore: introduce HTMLBuilder (#37688)

2026-05-13 17:06:53 +00:00

view_readme_test.go

Fix README symlink resolution in subdirectories like .github (#36775)

2026-03-01 05:33:08 +00:00

view_readme.go

Rename CurrentRefPath to CurrentRefSubURL (#37453)

2026-04-28 00:34:17 +00:00

view_test.go

…

view.go

refactor: use named Permission field in Repository struct instead of anonymous embedding (#37441)

2026-04-26 20:18:28 +00:00

watch.go

Fix inconsistent disabled styling on logged-out repo header buttons (#37406)

2026-04-27 17:33:10 +00:00

webgit.go

…

wiki_test.go

…

wiki.go

Refactor compare diff/pull page (1) (#37481)

2026-04-29 18:32:46 +00:00